Documents

Privacy policy

How cyberszkola.pl processes data: waitlist signups, statistics and advertising.

Data controller

The controller of your personal data is Jacek Wlodarczyk, a self-employed person (OSVČ), Poličanská 1487, 190 16 Praha 9 — Újezd nad Lesy, Czech Republic, IČO: 08298645.

Contact for personal-data matters: [email protected].

This policy covers the cyberszkola.pl domain. The joint policy covering all projects run under the cyberwiedza.pl brand is available at cyberwiedza.pl/polityka-prywatnosci.

What data we collect

From the waiting-list form: email address, page language, the identifier of the selected course, and the fact that marketing consent was given.

Technical signup metadata: IP address, the date and time of signup and of confirmation, plus campaign parameters (UTM) and the referring page address, where provided.

Website traffic statistics, collected in aggregated form and without identifying individuals.

After consent to marketing files is given — the Meta cookie identifier (_fbp) and a hashed email address passed to Meta for advanced matching. The address in plain form never leaves the browser.

If you arrive through a partner's link, we attach the partner's identifier and the time of your visit through that link to the order, and the partner's identifier to your waitlist signup.

Purposes and legal bases

Sending information about the selected course and about other educational projects within cyberwiedza.pl — Article 6(1)(a) GDPR (your consent).

Technical handling of signup and unsubscribe, including double confirmation of the address — Article 6(1)(f) GDPR (legitimate interest in running the list correctly).

Aggregate statistics on traffic and communication effectiveness — Article 6(1)(f) GDPR.

Marketing using the Meta pixel — Article 6(1)(a) GDPR (consent given in the banner). Without that consent the pixel is not loaded at all.

Attributing an order or a waitlist signup to the partner whose link brought you to us — Article 6(1)(f) GDPR (legitimate interest in settling our cooperation with partners).

Remembering the partner's identifier on your device — Article 6(1)(a) GDPR (consent to marketing files given in the banner). Without that consent the identifier is not stored on your device.

Defending against claims and demonstrating that consent was given — Article 6(1)(f) GDPR.

Recipients of the data

MailerLite Limited (Ireland) — subscriber list management and message delivery; processor.

Cloudflare, Inc. (USA) — hosting, CDN and security; processor. Transfer outside the EEA takes place on the basis of standard contractual clauses approved by the European Commission.

Plausible Insights OÜ (Estonia) — website statistics without cookies and without identifying individuals; processor.

Meta Platforms Ireland Ltd. — advertising measurement, only after consent is given. For measurement purposes Meta and the controller act as joint controllers.

Paddle.com Market Ltd — payment handling as Merchant of Record, once sales open; a separate controller in respect of transaction data.

Retention period

Waiting-list data is kept until consent is withdrawn or you unsubscribe. After withdrawal the address is removed from the list within 30 days.

Evidence that consent was given and withdrawn is kept for no longer than 3 years after withdrawal, solely to demonstrate legal compliance.

Unconfirmed addresses (where the confirmation link was never clicked) are deleted 30 days after signup.

Statistical data is kept in aggregated form for 24 months.

The partner's identifier and the time of your visit through their link form part of the order data in Paddle's system and remain there for as long as Paddle keeps the transaction data. In our settlement statements we keep them until our cooperation with the partner is settled and the deadlines for refunds and chargebacks have passed, and for no longer than 24 months from the purchase.

Your rights

You have the right to access your data, rectify it, erase it, restrict processing, port it, and object to processing based on legitimate interest.

You can withdraw marketing consent at any time — via the unsubscribe link in every message or by writing to [email protected]. Withdrawal does not affect the lawfulness of processing carried out before it.

You can change your consent to marketing files using the "Cookie settings" button in the page footer.

We handle requests within one month. In complex cases that period may be extended by a further two months, of which we will inform you.

Statistics and cookies

We run statistics in Plausible — a tool that uses no cookies and does not identify individuals. The basis is legitimate interest, so statistics do not require consent.

The Meta pixel writes marketing cookies (_fbp) and is loaded only after consent is given in the banner. Refusing does not restrict access to any part of the site.

After you consent to marketing files, we store in your browser's storage (localStorage, key cyberszkola_partner) the identifier of the partner whose link brought you to us, with the dates of your first and last arrival through it. The record lapses 30 days after your last arrival through a partner's link and is then deleted on your next visit to the site.

Files essential to the site's operation — remembering your banner choice and interface preferences — are stored without consent, because without them the site does not work correctly.

You can withdraw consent at any time using the "Cookie settings" button in the footer. Withdrawal stops any further collection by the pixel and immediately deletes the partner identifier remembered on your device.

Complaint to a supervisory authority

If you believe the processing of your data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority.

The authority for the controller's establishment: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, uoou.cz, [email protected].

If you live in Poland you may also complain to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.